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CLAIMS: 



1 . A method of distributing units of encrypted information and providing 
conditional access to the imits, using a secure device (14) capable of selectively enabling 
decryption of said units, the method comprising 

- distributing a stream comprising the units of information successively, each linked to a 
5 respective time-stamp; 

- sending an entitlement management message to the secure device (14), the entitlement 
message including a specification of a range (21, 22) of time-stamp values and entitling the 
secure device (14) to enable decryption of units of information that are linked to time-stamps 
with values in that range (21, 22), wherein the range (21, 22) has a starting point (21) 

10 substantially prior to a time value (24) of the time stamps distributed concurrent the 
entitlement message. 

2. A method according to Claim 1, wherein the stream is distributed to a plurality 
of subscribers, each with an own seciu-e device (14) and wherein the entitlement management 

15 message is one of a plurality of respective entitlement management messages, each sent 

receivable for the secure device (14) of a respective one of the subscribers, each entitlement 
management message including a specification of a respective range of time-stamp values 
(21, 22), the method comprising 

- receiving subscriber dependent subscription information; 

20 - setting a distance of said starting point (21) to said time value in each of the respective 
ranges (21, 22) according to a respective distance value and selecting each respective 
distance value from a set of two or more distance values, dependent on the subscription 
information for the subscriber for whose secure device (14) the entitlement management 
message is receivable. 

25 

3. A method according to Claim 1, wherein the entitlement management message 
is one of a series of successive ones entitlement management messages, each specifying its 
own range (21, 22) so that said range slides with time so that the starting point substantially 
has a time independent distance to said time value (24). 
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4. A method according to Claim 1 , wherein the secure device (14) maintains and 
updates a current time value corresponding to the time values of the time stamps as they are 
distributed as a function of time, the secure device (14) adjusting said starting point to a time 

5 independent distance before the current time value, the secure device (14) deriving the time 
independent distance from said one of the entitlement management unit (24) at least for a 
series of successive current time values. 

5. A method according to Claim 1, wherein the range (21, 22) ends substantially 
1 0 before the time value of the time stamps distributed concurrent with said one of the 

entitlement messages. 

6. A method according to Claim 2, the subscription information comprising, for 
one of the subscribers, a selection of a further range (30, 32) ending substantially prior to the 

IS time value (24) of the time stamps distributed at a time of receiving said selection, the 

method comprising sending a further entitlement management message in addition to said 
entitlement messages, the further entitlement management specifying the further range (30, 
32) and entitling the secure device (14) to enable decryption of imits of information that are 
linked to time-stamps with values in that further range (30, 32). 

20 

7. An information distribution system that provides conditional access to units of 
encrypted information, the system comprising 

- an information distribution device (10) arranged to distribute a stream of successive units of 
encrypted information, each linked to a respective time-stamp 

25 - at least one information receiving device (12, 19) arranged to receive the stream 

- a seciu-e device (14) coupled to the at least one information receiving device (12, 19), for 
selectively enabling decryption of the units imder control of an entitlement management 
message including a specification of a range (21, 22) of time-stamp values and entitling the 
secure device (14) to enable decryption of units of information that are linked to time-stamps 

30 with values in that range (2 1 , 22); 

- the information distribution device (10) being arranged to send the entitlement message so 
that the range (21, 22) has a starting point substantially prior to a time value (24) of the time 
stamps distributed concurrent with the entitlement message. 
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8. A system according to Claim 7, the system comprising a plurality of secure 
devices (14, in 19), each for a respective subscriber, wherein the entitlement management 
message is one of a plurality of respective entitlement management messages, each sent 
receivable for a respective one of the secure devices (14, in 19), each of the entitlement 

5 management messages including a specification of a respective range of time-stamp values 
(21, 22), and wherein the infomiation distribution device (10) has 

- an input for receiving subscriber dependent subscription information; 

- means (1 1) for setting a distance of said starting point to said time value in each of the 
respective ranges according to a respective distance value, the means (11) selecting each 

10 respective distance value from a set of two or more distance values, dependent on the 
subscription information for the subscriber for whose secure device the entitlement 
management message is receivable. 

9. A secure device (12) for use in an information distribution system that 

1 S provides conditional access to a stream of information units linked to time stamps, the secure 
device comprising 

- an input for receiving entitlement management messages; 

- a memory (144) for maintaining a current time count; 

- a management imit (142) for selectively enabling decryption of the information imits under 
20 control of the entitlement management messages, the management unit (142) being arranged 

to implement one of the entitlement management messages that includes a specification of a 
range of time-stamp values linked to units of information, for which the secure device (14) 
has to enable decryption, wherein the extending substantially prior to the current time count. 

25 10. An information distribution device (10,1 1) arranged to distribute a stream of 

successive imits of encrypted information to a secure device (14), each unit linked to a 
respective time-stamp, the device having 

- a transmitting unit (10) for transmitting an entitlement management message including a 
specification of a range (21, 22) of time-stamp values and entitling the secure device (14) to 

30 enable decryption of units of information that are linked to time-stamps with values in that 
range (21, 22) so that the range has a starting point (21) substantially prior to a time value 
(24) of the time stamps distributed concurrent with the entitlement message. 
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11. An infonnation distribution device according to Claim 10, arranged to 

distribute the stream to a plurality of subscribers, each having a respective secure device, the 
entitlement management message being one of a plurality of entitlement management 
messages for reception by respective ones of the secure devices, each entitlement 
5 management message specifying a respective range of time-stamp values, the device having 

- an input for receiving subscriber dependent subscription information; 

- means (1 1) for setting a distance of said starting point to said time value in each of the 
respective ranges according to a respective distance value, the means (11) selecting each 
respective distance value from a set of two or more distance values, dependent on the 

10 subscription information for the subscriber for whose secure device (14) the entitlement 
management message is receivable. 



